Skip to content

Commit

Permalink
added PGP keys for python releases on mac & windows
Browse files Browse the repository at this point in the history
I just finished 3TOFU of these keys. Fortunately, python signs its releases with PGP, so once we track these keys, we can actually cryptographically verify the authenticity of future python releases for both platforms.

On Linux we'll continue to install from apt or use the AppImage.

On Windows it's the only option to install python.

On MacOS, we'll try using the python.org release instead of the brew release. Not only is this more secure (brew is insecure), but it's also more likely to be backwards compatible than the brew builds (to be tested still)

 * #78 (comment)
  • Loading branch information
maltfield committed Apr 7, 2024
1 parent 644fdfa commit 73950f6
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions build/deps/python-mac.asc
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
0d96df4d4110e5c43fbfb17f2d347ea6aa65421d.asc
c9b104b3dd3aa72d7ccb1066fb9921286f5e1540.asc
File renamed without changes.

0 comments on commit 73950f6

Please sign in to comment.